@skillsmith/mcp-server 0.4.7 → 0.4.8

package/CHANGELOG.md

@@ -2,10 +2,32 @@
 
 All notable changes to `@skillsmith/mcp-server` are documented here.
 
+## v0.4.8
+
+- Version bump
+
 ## v0.4.7
 
 - **Fix: startup crash for new installs** — Bumped `@skillsmith/core` dependency floor from `^0.4.16` to `^0.4.17` to ensure `SkillInstallationService` export is available. Users with cached `core@0.4.16` saw a fatal `SyntaxError` on startup.
 
+## v0.4.6 (2026-03-24)
+
+- **README updates**: Updated npm README to reflect current features and usage.
+- **SDK compatibility**: Bumped `@modelcontextprotocol/sdk` to `^1.27.1` for compatibility improvements.
+- **Security**: Remediated security gaps across MCP tools as part of SMI-3506 security sweep.
+
+## v0.4.5 (2026-03-19)
+
+- **Fix: broken SkillDependencyRepository export** — Hotfix for missing barrel export that caused `SyntaxError` on startup when dependency intelligence tools were invoked (SMI-3468).
+
+## v0.4.4 (2026-03-06)
+
+- **Dependency intelligence tools**: `skill_outdated` tool checks installed skills against latest registry versions with dependency status reporting (SMI-3138).
+- **Skill pack audit**: `skill_pack_audit` tool detects version drift between installed and registry skills (SMI-2905).
+- **Semver validation**: `skill_validate` now requires a `version` field and validates semver format (SMI-2902).
+- **Encrypted skill detection**: `install_skill` detects git-crypt encrypted skills and provides unlock guidance (SMI-3221).
+- **Core dependency fix**: Fixed exact-pinned `@skillsmith/core` dependency to use caret range.
+
 ## v0.4.3
 
 - **Co-install recommendations**: `get_skill` responses now include an `also_installed` array — skills frequently installed alongside this one, surfaced once ≥5 co-installs are observed. Also shown on skill detail pages at [www.skillsmith.app/skills](https://www.skillsmith.app/skills).

package/README.md

@@ -193,6 +193,26 @@ All tiers include:
 | `skill_diff` | Section-level diff between skill versions | Individual+ |
 | `skill_pack_audit` | Audit all skills in a directory | Individual+ |
 | `skill_audit` | Check skills for security advisories | Team+ |
+| `team_workspace` | Manage team workspaces (create, list, get, delete) | Team+ |
+| `share_skill` | Add, remove, or list skills in a team workspace | Team+ |
+| `publish_private` | Mark a skill as private to your team | Team+ |
+| `team_analytics_dashboard` | Per-user tool usage counts, top tools, daily trend | Team+ |
+| `team_usage_report` | Weekly/monthly usage summary with period comparison | Team+ |
+| `audit_export` | Export audit log events for a time range | Enterprise |
+| `audit_query` | Query audit logs with filters | Enterprise |
+| `siem_export` | Export audit events for SIEM ingestion | Enterprise |
+| `analytics_dashboard` | Recommendation accuracy, adoption curves, team aggregation | Enterprise |
+| `usage_report` | Comprehensive usage report with all metrics | Enterprise |
+| `configure_sso` | Configure SSO/SAML integration (set, test, remove) | Enterprise |
+| `sso_settings` | View current SSO/SAML configuration | Enterprise |
+| `private_registry_publish` | Publish a skill to your private registry | Enterprise |
+| `private_registry_manage` | Manage private registry skills (list, get, deprecate) | Enterprise |
+| `rbac_manage` | Manage RBAC roles (create, list, get, delete) | Enterprise |
+| `rbac_assign_role` | Assign or revoke roles for users | Enterprise |
+| `rbac_create_policy` | Create and manage RBAC access policies | Enterprise |
+| `webhook_configure` | Configure HMAC-SHA256 signed webhooks for skill events | Enterprise |
+| `api_key_manage` | Manage API keys for programmatic access | Enterprise |
+| `compliance_report` | Generate SOC2, CycloneDX SBOM, or JSON compliance reports | Enterprise |
 
 ## Tool Parameters